$ rpki-client -vvf repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft File: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft (raw, json) Hash identifier: 46TF1Ik7r+fJWnyzmKPz6FP6okCqg1W6my+6C9DeLDc= Subject key identifier: 98:BC:26:80:71:B9:62:E9:0A:4A:A6:D8:3C:CC:9A:3C:F2:5D:37:9C Authority key identifier: FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 Certificate issuer: /CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Certificate serial: 5993B334CA728CC1520668055E9891BD72F7C75A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft Manifest number: 7E Signing time: Sat 07 Jun 2025 20:21:50 +0000 Manifest this update: Sat 07 Jun 2025 20:16:50 +0000 Manifest next update: Wed 11 Jun 2025 03:39:50 +0000 Files and hashes: 1: 3136302e32352e3235312e302f32342d3234203d3e20313533303938.roa (hash: WOZ5xs9U4F3KLpRDLfcgz83XleKTMEe9VnWS6HdwLsw=) 2: 3136302e32352e3235302e302f32342d3234203d3e20313533303938.roa (hash: FwGHsU9pvkCMW0hhE/47YL/pb6ELCWRvWw9egEH3Cj0=) 3: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl (hash: fC2PLFLgqizZNm9u7R3zKLY5HTSeDm0n/h2HVdGij8M=) 4: 3136302e32352e3235302e302f32332d3233203d3e20313533303938.roa (hash: BMrrPV+uJV5vgYvMtf5iM7UH/3Kth/c7l8TCbVDuBNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:93:b3:34:ca:72:8c:c1:52:06:68:05:5e:98:91:bd:72:f7:c7:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Validity Not Before: Jun 7 20:16:50 2025 GMT Not After : Jun 11 03:39:50 2025 GMT Subject: CN=98BC268071B962E90A4AA6D83CCC9A3CF25D379C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:47:64:78:16:3e:3d:d7:23:84:8b:0d:84:f8: 8e:34:35:ca:aa:63:6a:32:55:5d:08:35:56:72:b5: 1b:ac:46:d8:76:97:2f:2b:4f:0a:79:e6:c7:27:01: f6:ed:fa:f0:be:04:9e:84:24:59:f7:01:4a:72:2e: f6:69:11:9b:e6:04:12:6e:da:67:95:20:c7:ae:ad: 9f:69:87:09:6f:ee:b1:85:eb:48:64:a9:a1:83:61: 3d:f0:a3:c2:98:db:bc:39:7e:15:96:bd:b0:a4:c0: a6:16:14:a4:f2:72:e1:35:85:fb:c5:7e:ed:d9:0f: e1:66:99:2e:fd:1d:03:26:69:01:65:e2:15:00:f4: 51:7a:f3:b2:28:9d:3d:14:a3:48:66:91:50:66:a5: 9b:d8:78:52:9a:f4:3d:16:cb:be:b1:1c:b1:b0:d4: 1f:94:13:c7:5c:f0:29:9f:d3:df:7e:a3:4e:f1:10: 3f:b3:22:1a:5c:2c:cc:81:eb:70:51:25:fd:10:38: 79:9a:23:0f:76:3a:e6:22:1c:2a:58:6a:db:26:ad: 1a:d9:c7:74:80:c1:8f:1d:62:5c:a5:f0:f9:e0:8f: b9:fa:f2:f8:f0:e7:85:ad:44:7b:e1:41:2c:68:9d: 34:41:c5:38:1b:ec:2e:59:10:e8:bc:2f:ce:ba:ff: 25:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BC:26:80:71:B9:62:E9:0A:4A:A6:D8:3C:CC:9A:3C:F2:5D:37:9C X509v3 Authority Key Identifier: keyid:FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:fb:2f:59:8b:90:8c:63:40:c8:ec:a9:90:9a:52:66:a9:d8: 50:03:5e:5c:72:e8:44:df:4f:fe:c5:51:7c:2f:24:3e:93:23: ca:c2:1f:3c:2e:94:38:51:41:d9:a6:f8:46:46:f8:6d:87:9f: bb:77:91:69:52:7b:3a:75:fe:cc:24:fb:12:04:b2:3d:fe:17: d8:16:f2:b9:ae:77:4a:06:12:d9:17:98:0c:2f:2e:43:c5:da: 60:c7:db:8b:31:c1:61:88:fc:39:a9:80:4c:27:3d:05:11:77: f2:6a:22:35:f4:3c:c0:89:c9:62:ff:dc:da:a2:67:57:c1:b5: dc:07:e7:8b:af:b3:4c:13:56:25:92:a0:d6:84:23:3d:63:94: fb:71:f5:6d:b5:75:56:8c:9b:1b:d4:86:ec:3f:b0:c7:f3:26: 43:96:9a:e5:ad:82:01:6d:2e:d5:cd:df:a5:7b:50:90:7f:67: b1:26:55:41:36:23:8a:5b:35:1d:46:5b:c2:ca:1f:42:b4:77: d4:a2:02:c7:21:1a:e6:14:3e:e5:98:d5:0f:4d:5a:ac:79:72: 93:32:28:44:4b:fb:b0:87:55:c2:59:47:50:16:b2:50:d1:90: bc:f4:29:b9:ed:b5:2a:10:d4:83:c0:f6:ae:fb:87:f6:7e:7d: c4:de:14:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWZOzNMpyjMFSBmgFXpiRvXL3x1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3 NEMwN0U4MTAeFw0yNTA2MDcyMDE2NTBaFw0yNTA2MTEwMzM5NTBaMDMxMTAvBgNV BAMTKDk4QkMyNjgwNzFCOTYyRTkwQTRBQTZEODNDQ0M5QTNDRjI1RDM3OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFR2R4Fj491yOEiw2E+I40Ncqq Y2oyVV0INVZytRusRth2ly8rTwp55scnAfbt+vC+BJ6EJFn3AUpyLvZpEZvmBBJu 2meVIMeurZ9phwlv7rGF60hkqaGDYT3wo8KY27w5fhWWvbCkwKYWFKTycuE1hfvF fu3ZD+FmmS79HQMmaQFl4hUA9FF687IonT0Uo0hmkVBmpZvYeFKa9D0Wy76xHLGw 1B+UE8dc8Cmf099+o07xED+zIhpcLMyB63BRJf0QOHmaIw92OuYiHCpYatsmrRrZ x3SAwY8dYlyl8Pngj7n68vjw54WtRHvhQSxonTRBxTgb7C5ZEOi8L866/yUtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmLwmgHG5YukKSqbYPMyaPPJdN5wwHwYDVR0j BBgwFoAU+8Oabhd/jde6XiV9RInFdXTAfoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2FkMGEzYS0yNmI4LTQ0OWEtODhlYy1iZjAzOThlYTUzYTYvMC9GQkMzOUE2RTE3 N0Y4REQ3QkE1RTI1N0Q0NDg5QzU3NTc0QzA3RTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3NEMw N0U4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdhZDBhM2EtMjZiOC00NDlhLTg4 ZWMtYmYwMzk4ZWE1M2E2LzAvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1 NzU3NEMwN0U4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADL7L1mLkIxjQMjsqZCaUmap2FADXlxy6ETf T/7FUXwvJD6TI8rCHzwulDhRQdmm+EZG+G2Hn7t3kWlSezp1/swk+xIEsj3+F9gW 8rmud0oGEtkXmAwvLkPF2mDH24sxwWGI/DmpgEwnPQURd/JqIjX0PMCJyWL/3Nqi Z1fBtdwH54uvs0wTViWSoNaEIz1jlPtx9W21dVaMmxvUhuw/sMfzJkOWmuWtggFt LtXN36V7UJB/Z7EmVUE2I4pbNR1GW8LKH0K0d9SiAschGuYUPuWY1Q9NWqx5cpMy KERL+7CHVcJZR1AWslDRkLz0KbnttSoQ1IPA9q77h/Z+fcTeFH0= -----END CERTIFICATE-----Generated at Sun Jun 8 05:08:31 2025 by rpki-client